Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/chNizR9qYCVBPlJ0y1i0qYYolkY.roa
File: chNizR9qYCVBPlJ0y1i0qYYolkY.roa (raw, json)
Hash identifier: rU/cFOXSzNmLrlm/zuRIvvtHw3wnjCB/1qtSIPPrRoA=
Subject key identifier: 72:13:62:CD:1F:6A:60:25:41:3E:52:74:CB:58:B4:A9:86:28:96:46
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186DC9CE07123858F72512CEA4272E37570
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/chNizR9qYCVBPlJ0y1i0qYYolkY.roa
Signing time: Mon 13 Mar 2023 20:15:13 +0000
ROA not before: Mon 13 Mar 2023 20:15:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:dc:9c:e0:71:23:85:8f:72:51:2c:ea:42:72:e3:75:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 13 20:15:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=721362cd1f6a6025413e5274cb58b4a986289646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:89:b2:2b:70:b6:64:ae:41:0a:a2:18:ef:bd:
5b:5a:98:17:37:da:09:20:2b:bd:b4:3c:e0:07:57:
99:54:8f:ab:65:9d:ee:56:2c:f1:13:aa:c8:6f:92:
0e:cc:a9:db:55:5f:ae:fc:8e:09:39:4b:11:82:f4:
ca:db:4b:63:86:66:bb:59:85:ce:53:59:1b:2c:5f:
d6:d9:18:45:b1:22:5f:76:31:d0:70:44:ed:a9:3c:
75:58:de:3e:f4:3c:29:e6:c9:ad:7c:4d:f0:4b:e7:
7d:ad:7a:10:45:c4:68:3a:f5:e1:3c:59:16:e9:bc:
47:18:47:80:51:fe:2b:5a:a3:d6:90:61:dc:17:d4:
fb:1a:f1:58:15:c7:a2:b5:e6:0c:67:76:36:f4:5d:
14:f8:bd:e4:84:a7:c7:bd:d8:92:2b:9e:80:38:d6:
02:a9:d2:71:46:63:29:34:56:56:7d:62:07:b6:77:
af:93:60:f9:d2:93:5b:54:c1:d4:79:6c:c3:42:5c:
54:be:12:43:1b:cf:8c:bb:88:4e:b2:9a:b6:8c:c5:
1f:1a:c9:64:49:fd:5e:49:6b:b3:86:9d:77:53:16:
da:b0:ca:b9:61:05:30:da:f0:2a:09:e2:76:5a:1a:
02:c4:00:f3:6b:10:3e:b8:44:d7:ff:44:b3:de:c4:
ea:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:13:62:CD:1F:6A:60:25:41:3E:52:74:CB:58:B4:A9:86:28:96:46
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/chNizR9qYCVBPlJ0y1i0qYYolkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:43:6f:e7:13:dc:4b:17:3b:6b:a8:0c:a4:ed:d9:c0:2b:75:
ed:88:59:0b:27:78:2d:48:60:88:10:4a:5b:c3:13:9c:bd:9f:
86:d8:e6:20:78:7b:c2:be:6d:e0:49:3e:d1:2e:27:c6:66:65:
d7:7e:ec:fc:83:68:9e:25:f9:27:c1:e1:97:f4:09:9c:7a:04:
85:71:bb:2a:0e:12:d1:63:ef:fc:f6:d1:f3:34:2d:e1:79:f9:
14:27:ee:40:d1:66:e6:dd:e7:3c:49:d3:19:64:4c:f3:56:fc:
aa:84:e8:74:91:86:d2:a3:c5:9c:93:e7:56:6b:7d:6a:27:0d:
93:c9:fb:21:6a:6b:3d:fa:6c:f7:98:c4:89:2d:70:c1:b9:93:
a4:80:62:25:8e:5c:4e:93:3d:aa:d8:47:cc:4f:ea:24:20:08:
ed:bb:af:8c:15:a7:5f:c4:06:2e:35:a4:06:75:42:c3:d3:02:
d9:45:ea:f7:cb:8a:1f:c8:91:4f:99:a0:1b:ab:b8:ce:32:ad:
47:51:59:58:9f:47:3d:32:73:a8:73:4c:72:b2:bf:b2:66:ca:
21:9c:6b:9c:e1:69:78:b9:df:16:54:9c:22:75:7a:4d:94:94:
0e:92:02:0a:49:57:ef:21:b4:5f:9f:5e:c2:65:79:04:e8:af:
72:6c:29:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 22:20:22 2025 by rpki-client